Subprocessors
Last updated 14 October 2026.
These are the service providers that process personal data for MinderSprout on our behalf. We give at least 30 days' notice before adding or replacing a subprocessor, in line with the processor terms in our terms of service.
| Provider | What for | Where | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Servers that run MinderSprout and its database | Germany (Falkenstein) — UK/EU | UK adequacy regulations (EU) |
| Cloudflare, Inc. | Network, security and TLS in front of the app; R2 storage for diary photos and database backups (EU jurisdiction); public DNS; Cloudflare Access for the operator portal | EU for stored photos and backups; global network for traffic | UK adequacy for EU storage; UK Extension to the EU-US Data Privacy Framework and the UK Addendum to the EU SCCs |
| Stripe Payments UK Ltd / Stripe Payments Europe, Limited | Subscription payments, invoicing and the customer billing portal | UK and EU, with some processing in the US | UK adequacy; UK Extension to the EU-US Data Privacy Framework |
| Plus Five Five, Inc. (Resend) | Sending email: account verification, password reset, invitations, urgent announcements and billing notices | United States | UK Extension to the EU-US Data Privacy Framework; UK Addendum to the EU Standard Contractual Clauses |
Our sign-in service (Keycloak), database (PostgreSQL) and secrets store (Infisical) run on our own servers listed above, so they are not separate subprocessors.
Squelch Ltd, 66 Paul Street, London, EC2A 4NA, United Kingdom. Questions: [email protected].